Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3314/BRn5WIdzi0GIiCBibE7UiBCvDq4.mft
File: BRn5WIdzi0GIiCBibE7UiBCvDq4.mft (raw, json)
Hash identifier: G3U44ckJrMizNYpsGiO8hoURGTMqeo9sY/BpuAu8UsQ=
Subject key identifier: 85:6C:1B:38:D9:A4:F3:A7:33:41:D4:47:4E:44:E9:9C:2D:A5:A6:90
Authority key identifier: 05:19:F9:58:87:73:8B:41:88:88:20:62:6C:4E:D4:88:10:AF:0E:AE
Certificate issuer: /CN=0519F95887738B41888820626C4ED48810AF0EAE
Certificate serial: 0518
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BRn5WIdzi0GIiCBibE7UiBCvDq4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/BRn5WIdzi0GIiCBibE7UiBCvDq4.mft
Manifest number: 0518
Signing time: Sat 17 May 2025 22:43:25 +0000
Manifest this update: Sat 17 May 2025 22:43:25 +0000
Manifest next update: Sun 18 May 2025 04:43:25 +0000
Files and hashes: 1: BRn5WIdzi0GIiCBibE7UiBCvDq4.crl (hash: a4NZwPdaTIM+BaGkwBZLYVV9uWJloBFP1ZiDW7CS6ls=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0519F95887738B41888820626C4ED48810AF0EAE
Validity
Not Before: May 17 22:43:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=856C1B38D9A4F3A73341D4474E44E99C2DA5A690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:5d:f9:c7:d8:2d:6c:7d:eb:a5:ec:a0:7f:
fd:ba:65:6f:84:80:9a:b0:47:aa:ca:56:76:a8:a1:
cd:38:ab:07:91:4b:1a:b5:3c:1e:75:50:4b:3b:f5:
bc:dc:ab:ec:52:70:69:50:cc:4f:67:78:9a:ca:c3:
7c:2c:7f:cc:0d:da:bb:0e:8d:36:e9:e0:cd:8e:5b:
70:33:bc:36:24:3c:09:5c:bc:86:38:2b:65:d1:5c:
58:02:2f:1a:2e:b7:ff:a6:21:6b:12:46:f1:af:33:
8f:6b:96:02:51:b0:02:71:ec:c7:36:ed:ae:8a:4a:
ee:46:fe:13:40:3f:45:91:84:aa:d3:5b:1e:1b:d0:
0e:52:00:0a:fe:b2:f6:1a:f7:83:ce:92:a0:71:25:
9b:e8:92:18:02:e9:6e:00:b1:a6:16:44:ef:3a:1c:
0a:31:6f:df:87:3a:0d:0c:73:45:e5:8c:3d:8d:be:
ff:32:e3:50:7a:2f:e0:c1:11:3b:72:a6:a6:fd:08:
a2:7d:ca:0c:b0:72:71:c5:e7:aa:5b:bc:a8:10:20:
0d:e1:60:6f:05:3d:ff:e5:5d:b0:1a:eb:7b:09:62:
d1:c8:b2:3d:46:b5:10:1a:4f:a6:97:30:26:b5:d2:
4b:26:ea:ad:e8:ea:44:fc:12:83:9f:82:a6:2a:56:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6C:1B:38:D9:A4:F3:A7:33:41:D4:47:4E:44:E9:9C:2D:A5:A6:90
X509v3 Authority Key Identifier:
keyid:05:19:F9:58:87:73:8B:41:88:88:20:62:6C:4E:D4:88:10:AF:0E:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/BRn5WIdzi0GIiCBibE7UiBCvDq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BRn5WIdzi0GIiCBibE7UiBCvDq4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3314/BRn5WIdzi0GIiCBibE7UiBCvDq4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:eb:70:4f:69:b8:4b:ae:b7:16:dc:5e:6c:30:a3:30:9c:87:
42:30:ba:56:00:5c:b6:00:38:2e:91:48:18:8c:80:90:33:9c:
4f:ae:f8:5c:d8:96:2e:57:94:e1:ea:7e:96:b6:ff:96:8e:ae:
a1:a8:9e:4e:bc:3d:10:94:d7:a4:ac:a9:eb:aa:b5:c7:db:27:
b4:97:32:f2:45:ef:87:52:f4:81:2d:c1:12:db:4c:aa:ac:22:
27:bc:ef:26:1b:d9:48:b8:a9:d9:b3:5f:a0:05:b3:57:25:9b:
99:34:1b:c3:65:68:a8:be:df:07:e2:ee:7a:6a:69:8b:24:28:
62:8c:ec:21:9d:fc:42:f7:79:8a:d0:0d:b1:ad:16:26:ae:9e:
0e:37:43:a9:24:e2:e7:5a:9c:a8:1b:22:68:7c:47:df:6c:11:
3c:b3:8b:b4:80:af:e9:ac:b0:4d:19:bf:9d:2b:7f:a1:c1:68:
6e:b3:8f:10:cc:f7:5a:c0:74:e3:d0:17:f2:d4:f6:e0:c7:6a:
a2:c0:05:a6:e4:52:9d:b6:7a:79:e6:32:b1:37:19:a9:9f:7d:
62:77:32:2c:20:e3:cf:9a:89:ad:10:b4:c3:23:01:0c:b7:01:
2a:8d:aa:3e:f5:49:bf:b3:8e:3a:f8:3f:aa:38:34:e3:c7:17:
90:ac:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:55:08 2025 by rpki-client